Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5bbfa23-4436-3de6-8a1a-6eb34b8e78cf.roa
File:                     d5bbfa23-4436-3de6-8a1a-6eb34b8e78cf.roa (raw, json)
Hash identifier:          /uW2uI8fByqDqV/TsPickSPVWk4cGq4B1ApYOw2eK/o=
Subject key identifier:   A9:4A:CB:33:DF:15:58:66:55:0D:D1:AE:57:6A:F8:F1:3A:76:AD:B5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384A56B6FFC28F819D7ED22E40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5bbfa23-4436-3de6-8a1a-6eb34b8e78cf.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Wed 09 Dec 2026 05:00:00 +0000
asID:                     11427
IP address blocks:        97.98.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4a:56:b6:ff:c2:8f:81:9d:7e:d2:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2026 GMT
        Subject: CN=5c48087b-40f2-4a42-8325-68e9a77fcf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:12:5e:20:2c:cd:bd:7e:f7:a4:dc:4e:bd:
                    0c:5a:c0:7f:4b:1b:6c:4a:d3:38:ee:ed:b8:51:2c:
                    43:8c:c3:71:71:f9:ba:6d:dc:80:49:b4:f4:c5:eb:
                    a6:31:0f:16:c6:c8:2f:b7:da:84:ec:b5:17:c3:16:
                    94:5b:7d:41:53:54:9b:b4:14:a8:0e:53:36:b6:92:
                    41:a9:77:5d:e9:06:89:84:82:54:98:a1:c7:ed:6e:
                    64:74:7a:18:64:4f:e7:bc:53:ab:e0:85:c9:1f:df:
                    cd:8b:64:d5:9f:5c:08:58:ae:ce:b7:83:ae:bd:04:
                    0a:55:b0:0c:f4:6a:90:50:99:72:dd:a6:de:12:fb:
                    ea:f2:41:a8:4a:80:bd:7c:4d:c2:23:0e:aa:52:d3:
                    25:b5:cc:4e:7f:8f:74:c6:05:83:41:a5:de:27:e4:
                    c3:50:f9:75:43:1b:0b:d2:48:e8:ff:af:5d:77:6b:
                    70:3d:22:9c:eb:ee:af:31:fd:99:79:50:83:88:d6:
                    78:ab:7e:51:90:9e:65:fa:da:0e:0c:1b:59:9a:07:
                    29:bc:b8:54:01:15:c5:5f:be:92:1d:e6:a8:6f:98:
                    37:82:5d:62:35:4a:eb:3a:9f:70:a1:10:f7:64:35:
                    26:13:89:34:73:2b:ed:4b:57:c1:26:4d:15:d8:c4:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:CB:33:DF:15:58:66:55:0D:D1:AE:57:6A:F8:F1:3A:76:AD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5bbfa23-4436-3de6-8a1a-6eb34b8e78cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.98.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:af:dd:b9:6f:da:fd:a9:73:51:72:16:5b:ec:2d:e2:78:b9:
         3c:f5:f4:57:ff:f1:4b:87:dc:91:e7:2c:ca:59:e2:ad:77:48:
         47:c9:3a:db:51:42:4e:2c:67:0a:a2:3c:36:6c:95:dc:6e:aa:
         c1:2e:49:87:6c:e5:9f:0e:2e:c7:85:2c:7b:9a:b4:f5:3a:8d:
         9c:fa:05:98:8a:1d:0a:42:b4:0c:ca:e5:ab:81:11:76:37:25:
         4f:1d:fe:19:e5:9c:93:1a:a8:4c:5f:7b:fd:71:fc:62:78:48:
         84:7b:f8:b7:d3:35:f4:ed:bb:d0:33:43:10:7f:3d:48:bf:78:
         c5:d5:6c:2b:73:fe:4d:08:c4:d2:c8:ea:7e:64:fa:a5:9b:8a:
         de:ab:0b:64:50:70:a1:ca:7d:f3:e2:da:aa:4e:23:80:a8:de:
         e9:78:fb:ba:e2:88:7f:8f:53:00:1e:44:0f:24:99:dc:f0:74:
         e4:57:99:2d:ce:8b:19:eb:cb:98:52:32:bd:6f:ae:be:73:11:
         de:7c:0d:c9:fa:0a:2f:5f:3f:e5:91:78:24:88:66:eb:ee:d7:
         b4:14:42:cc:42:09:c4:5d:d4:c5:1d:87:2a:eb:a6:65:f3:c0:
         b7:a1:51:23:e8:9f:99:75:36:ec:ab:e4:0c:94:76:be:03:b2:
         7b:e5:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:12 2024 by rpki-client on console-ams.rpki-client.org